The stack calculus 



Alberto Carraro 



Thomas Ehrhard 



PPS, Universite Denis Diderot Paris, France 



PPS, Universite Denis Diderot Paris, France 



acarraroOpps . univ-paris-diderot . f r 



thomas . ehrhard@pps . univ-paris-diderot . f r 



Antonino Salibra 



DAIS, Universita Ca' Foscari Venezia, Italia 



salibraOdsi .unive . it 



We introduce a functional calculus with simple syntax and operational semantics in which the calculi 
introduced so far in the Curry-Howard correspondence for Classical Logic can be faithfully encoded. 
Our calculus enjoys confluence without any restriction. Its type system enforces strong normalization 
of expressions and it is a sound and complete system for full implicational Classical Logic. We 
give a very simple denotational semantics which allows easy calculations of the interpretation of 
expressions. 

1 Introduction 

The Curry-Howard correspondence [16 ] was first designed as the isomorphism between natural deduc- 
tion for minimal Intuitionistic Logic [28 ] and the simply typed A -calculus, and for a long time no one 
thought this isomorphism could be extended to Classical Logic, until Griffin [14] proposed that natural 
deduction for Classical Logic could be viewed as a type system for a A -calculus extended with a con- 
trol operator ^ , introduced by Felleisen in his A 'if -calculus iflOl . There are also other operators that 
correspond to logical axioms that, once added to minimal Intuitionistic Logic, give proof systems of 
different power, from minimal to full implicational Classical Logic. Felleisen's So, corresponding to the 
Double-Negation Elimination law, gives full implicational Classical Logic; less powerful operators are 

(a.k.a. call/cc), typable with Peirce's law, and stf (a.k.a. abort) typable with the Ex-Falso Quodlibet 
law. On the programming side, this classification corresponds to the different expressive power of the 
operators as control primitives. Ariola and Herbelin [1] survey and classify these logical systems and 
introduce a refinement of A ^-calculus which aims at resolving a mismatch between the operational and 
proof-theoretical interpretation of Felleisen's A ^-reduction theory. 

Another extension of the A-calculus is Parigot's X\l -calculus 11271 which introduces a Natural Deduc- 
tion with multiple conclusions. This system implements minimal Classical Logic and it is able to encode 
the primitive call/cc; Ariola and Herbelin [1] extend it to cover full Classical Logic and compare their 
system with Felleisen's A ^-calculus: similar studies are made by De Groote Q. The correspondence 
between classical principles and functional control operators is further stressed by De Groote's extension 
of A-calculus with raise/handle primitives flU. While the untyped version of A/^-calculus enjoys con- 
fluence, its extensional version is only confluent on closed terms via the addition of a rewrite rule that 
destroys the strong normalization of typable terms [|6]. 

Gentzen's sequent calculus LK ifTTl is put in correspondence with a reduction system by Urban ||32| ; 
the type system of Curien-Herbelin's XpLpL -calculus corresponds to its implicational fragment. These 
two approaches are compared in detail by Lengrand [24]. These calculi highlight the duality between 
call-by- value and call-by-name cut-elimination (or evaluation): confluence is not achievable without 
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choosing one of the two strategies. Other computational interpretations of Classical sequent calculus 
are Girard's LC [[13 1 and the translations of Classical Logic in Linear Logic [5], based upon linear dual 
decomposition of classical implication. 

In this paper we introduce the stack calculus. The idea of this calculus comes from a synthesis of 
Krivine's extension of the A -calculus with stacks and call/cc [18] with Parigot's A /i -calculus. It also 
bears similarities with the call-by-name variant of A/i/i -calculus. In Krivine's Classical Realizability 
|[T8l classical implication is associated to a stack constructor, while in A pL -calculus (as in A ^-calculus) 
the arrow-type is introduced by an intuitionistic A-abstraction: the role of the /I -abstraction is to make it 
classical by "merging together" many intuitionistic arrows. The pi -abstraction can then be thought of as a 
functional abstraction over lists of inputs, corresponding to a list of consecutive A -abstractions. This idea 
is used in the design of Low-Streicher's CPSco-calculus ll25l which is an infinitary version of A-calculus 
that allows only infinite abstractions and infinite applications. 

The stack calculus is a finitary functional language in which stacks are first-class entities, and many 
of the previously-mentioned calculi can be faithfully translated. The stack calculus enjoys confluence 
without any restriction, also in its extensional version. We type the stack calculus with a propositional 
language with implication and falsity, to be associated to stack construction and empty stack, respec- 
tively. As a consequence one obtains a sound and complete system for full implicational Classical Logic. 
In our case the realizability interpretation of types a la Krivine matches perfectly the logical meaning 
of the arrow in the type system: proofs of soundness and strong normalization of the calculus are both 
given by particular realizability interpretations. The simplicity of the stack calculus, which does not 
use at the same time A- and pi -abstractions allows an easy encoding of control primitives like call/cc, 
label/resume, raise/catch. 

Many researchers contributed to the study of proof semantics of Classical Logic. From Girard |TT3~I . to 
Reus and Streicher [29], to Selinger [30 1 who gives a general presentation in terms of control categories. 
It is also very interesting the work by Laurent and Regnier ll23l which shows in detail how to extract a 
control category out of a categorical model of Multiplicative Additive Linear Logic (MALL). 

Inspired by Laurent and Regnier's work [23 1 we give a minimal framework in which the stack cal- 
culus can be soundly interpreted. The absence of the A -abstraction, allows us to focus on the minimal 
structure required to interpret Laurent's Polarized Linear Logic 11211 and to use it to interpret the stack 
calculus. The simplicity of the framework gives an easy calculation of the semantics of expressions. 

2 The untyped stack calculus 

The stack calculus has three syntactic categories: terms that are in functional position, stacks that are 
in argument position and represent streams of arguments, processes that are terms applied to stacks. 
The basis for the definition of the stack calculus language is a countably infinite set of stack variables, 
ranged over by the initial small letters a, j3,y, . . . of the greek alphabet. The language is then given by 
the following grammar: 



We use letters E,E' to range over expressions which are either stacks, terms or processes. We denote by 
Z p , Z s , Z 1 , and Z e the sets of all processes, stacks, terms, and expressions respectively. The operator jj. is 



71, GJ 

M,N 
P,Q 



a | nil | M.% | cdr(7r) stacks 
/la.P | car(7r) terms 
M-kiz processes 
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a binder. An occurrence of a variable a in an expression E is bound if it is under the scope of a /ia; the 

set W(E) of free variables is made of those variables having a non-bound occurrence in E. 

Stacks represent lists of terms : n i I is the empty stack. A stack Mi . • • • . M& .nil, stands for a finite list while 

a stack M\. ■ ■ - .M^. a stands for a non-terminated list that can be further extended. 

Terms are entities that wait for a stack to compute. A term pta.P is the pt-abstraction of a in P. 

Processes result from the application M* % of a term M to a stack %. This application, unlike in X- 

calculus, has to be thought as exhaustive and gives rise to an evolving entity that does not have any 

outcome. 

Application has precedence over \i -abstraction and the stack constructor has precedence over appli- 
cation, so that the term \ia.M-kN. % unambiguously abbreviates \ia.(M* (N. ft)). As usual, the calculus 
involves a substitution operator. By E{n/a} we denote the (capture-avoiding) substitution of the stack 
71 for all free occurrences of a in E. The symbol '=' stands for syntactic equality, while ':=' stands for 
definitional equality. 

Lemma 1 (Substitution Lemma). For E G L e , tc, (D G L s , a FV(GJ) and a ^ j8 we have 
E{K/a}{m/p}^E{m/p}{K{m/p}/a}. 

Definition 2. The reduction rules of the stack calculus are the following ones: 

(/i) (jua.P)*7r -fy P{n/a} 
(car) car(M.7i) — ^ car M 
(cdr) cdr(M. 7r) -> cdr 7T 

Adding the following rules we obtain the extensional stack calculus: 

(T71 ) jia.M-ka —j-rn M ifa^FV(M) 
(rj 2 ) car(7r).cdr(7r) — s>,, 2 % 

We simply write — > s for the contextual closure of the relation (— >^ U — >car U — > c dr)- Moreover we 
write — >-q for the contextual closure of the relation (— ^ U —^2) and finally we set — > sr] = (— » s U — 7^). 
For example, if I := /xa.car(a) *cdr(a), then 1*1. nil — > s I* nil — ^ s car(nil) *cdr(nil) and the reduction 
does not proceed further. If co := /xa.car(a)*a, then co*co. nil — > s co*co. nil; this is an example of a 
non-normalizing process. The stack calculus enjoys confluence, even in its extensional version, as the 
following theorems state. 

Theorem 3. The -^ s -reduction is Church-Rosser. 

Theorem 4. The — > ^-reduction is Church-Rosser. 

We observe that Theorem [4] holds despite the non left-linearity of the reduction rules of the exten- 
sional stack calculus. In other calculi, like the A -calculus with surjective pairing, the interaction of the 
extensionality rule with the projection rules breaks the Church-Rosser property for the calculus iTTTl . 

2.1 Translation of lambda-mu-calculus 

Many calculi have been introduced so far to extend the Curry-Howard correspondence to classical logic 
lfT4"ll27l l8ll32ll3l. Since we cannot attempt to report a comparison with the stack calculus for each one 
of them, so we choose probably the best known, i.e. Parigot's A/i -calculus. In this section we show how 
X\L -calculus can be faithfully encoded into the stack calculus (in the precise sense of the forthcoming 
Theorem [6]). 
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The basis for the definition of the A/i -calculus language are two (disjoint) sets AVar and /iVar of 
A -variables and /^-variables (a.k.a. names), respectively. The names, ranged over by a, j8, y, . . ., are are 

taken from /^Var and the usual variables, taken in AVar, are ranged over by x,y,z, The expressions 

belonging to the language of A/i -calculus are often divided into two categories, terms and named terms, 
produced by the following grammar: 



We use letters e,e' to range over expressions which are either terms or named terms. We denote by A\ 
A p , and A e the sets of all terms, named terms and expressions, respectively. 

We briefly recall the operational semantics of XjX -calculus. In addition to the usual capture-free 
substitution e{t /x} of a term t for a variable x in e, XjX -calculus uses the renaming e{fi / a} of a with /3 
in e and the structural substitution e{s/*a} that replaces all named subterms [a]t of e with the named 
term [a]ts: for example (Xy.jifi \a]z){Xx.x/* a} = Xy.fip .[a\z{Xx.x) (see |[27l). Note that we adopt here 
the notations of David and Py [6 ] instead of Parigot's original ones. The reduction relation characterizing 
the X\i -calculus is given by the contextual closure of the following rewrite rules: 

(/$) (Xx.t)s — >p t{s/x} logical reduction (p) \f}](fxa.p) — ^ p p{f$/a} renaming 

(ju) (na.p)s {xa.p{s/*a} structural reduction (B) na.[a]t -> e t ifa^FN(f) 

The reduction — was proved to enjoy the Church-Rosser property by Parigot ll27l . The extensional 
XjJ. -calculus is obtained by adding the contextual closure of the following reduction rules: 



We are now going to translate X /I -expressions into expressions of the stack calculus (stack-expressions, 
for short). A minor technical detail for the translation is the need of regarding all A -variables and all 
names as stack variables. 

Definition 5. Define a mapping (-)° : A e — > £ e by induction as follows: 

x° = n p. car (x)* ft 

(Xx.t)° = \ix.f *cdr(jc) 

(ts)° = nj5.t *s°.l5 £ 0FV(?°)UFV(5°) 

i[a]t)°=t°*a 

(fia.p)° = jia.p° 

The translation of Definition [5] preserves the convertibility of expressions and in this sense provides 
an embedding of X\l -calculus into the stack calculus. 
Theorem 6. Let e,e' € A e . 

(i) If e -^p^pe e', then e° and (e')° have a common reduct in the stack calculus. 

(ii) If e — ^/B^xperjv e '< then e° and (e')° have a common reduct in the extensional stack calculus. 

Note that the extensional XpL -calculus does not enjoy a full Church-Rosser theorem, as witnessed by 
the following counterexample [6]: [y]y n P «- [p]Xx.(pLa.[y\y)x — >^ [P]Xx.fia.[y}y. 

However these kinds of situations do not arise in the stack calculus (by Theorem HJ): in this case for 
example we have {[f\y)° ^ s car(y)-kj sri «- ([p)Xx.jia.[f\y)° . 

For example (Xx.x)° = /ix.car(x)*cdr(x) and (call/cc)° = /ia.car(a)*(/x/3.car(/3)*cdr(a)).cdr(a), 
where call/cc = Xf.jia.[a](f(Xx.ji8.[a]x)). 



p,q 



s.t 




named terms 



(7]) Xx.tx^rjt ifx^FV(f) 
(v) \ia.p ^yXx.\ia.p{xj*a] ifx0FV(p) 
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3 The typed stack calculus 

We are now going to look at the stack calculus in the light of the Curry-Howard isomorphism. Since the 
stack calculus can encode calculi with control features (such as A/i -calculus), it can be given a deductive 
system of full classical implicational propositional logic ({—)■, _L}-fragment). 

The type system has judgements that come in three forms: n : A h A, h M : A \ A, and h P \ A, where as 
usual greek capital letters A, A' are used to denote contexts, that is sets of assumptions {cti :A\, . . . , a„ :A n } 
(also abbreviated by a :A). In a judgement like h M : A \ A, the vertical bar separates the context A from 
the active formula A; Theorem [9] can sharpen its role via a comparison with judgements in typed Xpt- 
calculus. 



\- M :A \ A n : B\- A a:A£ A n:A^BhA 

[-> '1 [ax] ~ ; — [-> ei] 

M.k:A^B\-A a: Ah A cdr(7r) : fi h A 

n : A ^ B\- A hP|A,a:A hM:A|A 7i:AhA 

\ji,a] ; [cut] 



Hcar(7i):A|A h /j.a.P : A| A hM*7r|A 

[±/] 

nil : XI- A 



Fig 2: Typed stack calculus - propositional {—>, _L} -fragment. 

The choice for the forms of the judgements is justified by the forthcoming Theorem [9] where it 
will appear that the role of contexts is analogous to that of name contexts (i.e. right contexts) in typed 
A -calculus (see Figure 3). 

It is very well-known that by restricting Gentzen's sequent calculus LK |[TTil to manage at most one 
formula on the right-hand side of sequents one gets the intuitionistic sequent calculus. On the other 
hand, the symmetric restriction (which, by symmetry, is well behaved with respect to cut elimination) is 
not so popular. One can find an explicit study of the induced system in Czermak H. In l22l Laurent 
studies a slight variation of Czermak's system, that he calls LDo, and explores the logical duality between 
LDo and its symmetrical calculus LJo- The existence of these two symmetrical (and equivalent, via 
duality) systems has its roots in the dual "decomposition" of LK into Danos et. al's LKQ and LKT 
systems, corresponding to call-by-value and call-by-name evaluation of classical proofs, respectively. 
Both systems are as powerful as LK, and LKT can be encoded into LDo, in which the stoup disappears, 
since there is at most one formula on the left-hand side of sequents. There is a close relationship between 
LDo, LKT and the stack calculus, but indeed while the first two are formulated as a sequent calculus (i.e., 
with introduction rules only) the latter has elimination rules. One can translate both LKT and LDo into 
the stack calculus (and viceversa), somewhat as Gentzen's LK can be translated into Prawitz's natural 
decuction [28] (and viceversa) but the translations are not mere inclusions. 

The judgements in stack calculus have the following intuitive logical interpretation, in terms of the 
classical (boolean) notion of semantic entailment "(=". For those of the form % : A \- J3i :B\, . . . ,J3„ :B n , 
read U ->B\ ^B n t= -A"; for those of the form h M : A \ j3i :B X , . . . , J3„ :B n , read , . . . , (= A"; 
for those of the form h P \ j3i : B\ , . . . , j8„ : B n , read , . . . , ->B n \= _L". The above indications will be 
restated and proved precisely in Theorem [FT] 

We now show that the reduction rules specified in Section |2] are indeed reduction rules for the proofs 
of the typed system. 
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Lemma 7 (Typed substitution lemma). Suppose n : B h A. 
(i) If® : A h p :B, A, then CJ{^/j8} : A h A 
fnj i/hM : A | /3:fi,A, then h M{7i/j3} : A | A 

(m) i/hP [ j3 :B,A, ffen h P{^:/j3} | A 

Using Lemma |7J we can prove that the reduction of a typed term preserves the type. 
Theorem 8. For all k,k' € I s , all P,P' E E p an d M,M' <E we have that 
(i) if\-P\AandP -h^ P', ^en h P' | A 

( hJ if it : A h A a«(i 71 — s> sr) 7r', f/zerc tt' : A h A 

(Hi) if\- M : A | A a«J M — > srj M', h M' : A | A, 

Another way to type the stack calculus is to choose a language with negation, conjunction and falsity, 
to be associated to abstraction, stack construction and empty stack, respectively. This approach mirrors 
the one used by Lafont et al. lfT9l to type the A-calculus with explicit pair constructor and projections. 
The result is an intuitionistic proof system that can be seen as the target of a CPS translation that embeds 
Classical Logic into a fragment of Intuitionistic Logic via a mapping that transforms the types but not the 
proofs; this can be done by two translations (•)+ and (-)~ from {— >, _L}-formulas into {A, _L}-formulas 
as follows: _L + = ->_L and a + = a, for every atom a; (A — > B) + = A~ Afi + ; A~ = ^A + . One obtains a 
"rule-per-rule" correspondence: under this point of view, the stack calculus is the target-language of a 
CPS translation from itself that alters the types but not the proofs, while the translation of Lafont et al. 
does change also the terms. 

3.1 Translation of typed lambda-mu-calculus 

The A/i -calculus is endowed with a type system that is a sound and complete Natural Deduction system 
for purely implicational classical logic. 

The type system has judgements that come in two forms: T t : A \ A and T p \ A. On the 
left-hand side, T represents a context x : A of assumptions for the free A-variables, while on the right-and 
side, A represents a context a : B of assumptions for the free names. 



F,x:A \~xn t:B\A _ Fh^t:A^B\A Fh^s:A\A 



■ i,x 



r Xx.t :A—7-B\A F ts : B \ A ' 

TH A ^:A|A rh AM H/3:A,A xjAeF 



rh AA( [a]t | a:A,A rh^ nfi.p : B \ A Fh^x:A\A 



Fig. 3: Typed X\l -calculus - prepositional {— >}-fragment. 

Given a context r = x\ :Ai, . . . ,x n :A n and a sequence of formulas C = C\, . . . ,C n we write r — > C as 
an abbreviation for x\ : A\ — > C\ , . . . ,x n :A n — > C„. 

Theorem 9. (7) 7/T t : B \ A, then for all sequences C of formulas we have \- t° : B \ F — > C, A. 

(ii) IfF p | A, then for all sequences C of formulas we have h p° \ F — >■ C, A. 

From Theorem |9] results clearly that when the A -variables are looked at as stack variables, they are 
endowed with a stream type of which only the type of the head is uniquely determined. 

Finally we observe that the empty stack nil does not appear in the translations of A pL -terms. It is 
needed if we want to translate the so-called A/i-top calculus (H: in fact one can naturally set ([top]t)° = 
f°*nil. 
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3.2 Realizability interpretation of classical logic via stack calculus 

In this section we set up a framework which is the analogue of Krivine's Classical Realizability |fT8l . 
Krivine's idea is to interpret implicational formulas at the same time as sets of stacks and sets of terms of 
his modified A -calculus obtaining, respectively, falsehood and truth values for the formulas. This method 
has many applications, among which the extraction of programs realizing mathematical theorems in the 
context of relevant logical theories such as Zermelo-Frenkel Set Theory and Analysis [18 ]. We will 
apply particular instances of realizability interpretation in Sections [4] and 13.31 to prove soundness and 
strong normalization of our typed calculus. 

Let TCI 1 and C £ s be given sets of terms and stacks, respectively, such that nil € and 
if M G T and % G 0, then M. % G and cdr(^) G 0. 

We define three binary relations y t , y p on £ s , E* and £ p , respectively, as the smallest reflexive 
relations satisfying the following conditions: 

• >~ s is transitive; 

• if M G T, X G and GJ ^ s M. n, then car(GJ) y t M and cdr(G7) y s n; 

• if 7i GO, then (/ia.P) *7T >- p P{n/a}\ 

• if M' >- t M, then Af ' -kit )~ p M-kK. 

Moreover we let >~ e =>-p U >- s U >- t and we say that a set X C E e is saturated if E G X and E' ^ e E 
imply E' G X. For X C I e , we let ^(X) denote the family of all saturated subsets of X. 

Definition 10. A triple ( II , T, 0) of sets is a realizability triple if II C E p , T C I 1 , C I s are all saturated. 

Definition 11 (Realizability relation). Let (_1L,T,0) be a realizability triple. We define a binary relation 
IhC T x &> s (0) as M lh X iffVn G X. M*% G_[]_. 

If M lh X, we say that M realizes X, or that M is a realizer of X; the set of realizers of X is 
rea(X) = {M G T : M lh X}. We define the following binary operation on £P(L S ) as follows: 
X^Y = {(D GO: 3MG rea(X).3n G Y. ® y s M. n). 

We indicate by At the set of all atomic formulas, which includes _L and a countable set of atoms. 
We indicate by Fm the set of all formulas built from At with the connective — >. We use the following 
conventions: letters A,B,C, . . . range over Fm, and F,G,H,... range over At. We let arrows associate to 

the right, so that A— s>C=A— s-(B— ^C). Every formula is of the form B\ — >■ > B n — > G, where 

G is atomic. As usual the negation is defined as ^A := A — > _L 

Let R = (_!L,T,0) be a realizability triple. An atomic K-interpretation is a function J? : At — >• ^ s (0) 
such that J^(-L) = 0. Then J 1 extends uniquely to a map ||-||y : Fm — > £?(L S ) by setting ||A — > B\\j = 
\\A\\jr => The set \\A\\jr is called the falsehood value of the formula A under J' . The truth value 

\A\jf of a formula A under is given by \A\j = rea(||A||,^). 

Proposition 12. For every formula A, \\A\\j G ^(0) ancf |A|jr G ^ S (T). 

Proof. By induction on the structure of formulas. For falsehood values is suffices to observe that <^ s (0) 
is closed under the =>■ operation. For truth values, use the fact that M' >~ t M implies M' -kit >- p M-kK and 
the saturation of _1L. □ 

If % = %{,... ,n n and B = B\,...,B n are sequences, we write 7t G \\B\\,f as an abbreviation for 
%\ G \\jr, . . . ,% n G ||B„||^. The next theorem is the stack calculus analogue of Krivine's Adequacy 
Theorem [18], which shows that realizability is compatible with deduction in classical logic. It is an 
essential tool that will be used to obtain, in a uniform way, both soundness and strong normalization of 
the typed calculus. 



100 



The stack calculus 



Theorem 13 (Adequacy theorem). Let R = (JL,T,0) be a realizability triple and let be an R- 
interpretation. If n G then 

(i) Ifm :A\-a:B, then m{7i/a} G ||A||^; 

(ii) If\-M :A\a:B, thenM{n/a} G \A\y; 
(Hi) If\-P | a :B, then P{%/a] eJL 

One proves all items simultaneously proceeding by induction on the depth of type derivations. 

3.3 Normalization in the typed stack calculus 

We are now going to prove that the typed stack calculus is strongly normalizing. We prove this fact by 
adapting the reducibility candidates technique to our setting. It becomes a sort of instance of Krivine's 
adequacy theorem in the context of Classical Realizability. We let SN e C £ e be the set of all strongly 
normalizing expressions of the stack calculus (w.r.t. — » SJ1 -reduction); SN l , SN P , SN S denote the sets all 
strongly normalizing terms, processes and stacks, respectively. 

Proposition 14. S = (SN^SN^SN 55 ) is a realizability triple. 

The proof of Proposition [14] consists in showing that if E' >~ e E and E G SN P (resp. E G SN\ 
E G SN S ), then also E' G SN P (resp. E' G SN l , E' G SN S ). One can proceed by induction on the definition 
of The main point of such a proof is when we consider the case in which P = M * % G SN P and 
P' =M'*n wifhM' >- t M because there there exist GJ and %' such that UJ y s M.7t' andM' = car(iJJ). Here 
one can show that if M' * 71 has an infinite reduction path, then M-kii has an infinite reduction path too. 
Note that it is crucial that for the terms M' = /xa.(/Xj6./3[l]*j6)*(/xy.a[0]*a).nil andM = /j^ ot . n i I [0] * n i I 
we have M' )f t M. In fact, setting % = (ju5.5[0] *5). nil, we obtain that M-k% is strongly normalizing 
but M' * % is not strongly normalizing. 

Let A be a formula. We define its arity ar(A) by induction setting ar(G) = and 
ar(A — > B) = 1 + ar(fi). It is convenient sometimes to use abbreviations n[n) := cdr(- • • cdr(?r) • • • ) 
(n times) and n[n] := car(^[n)), in order to make some expressions more readable. 

Theorem 15 (Strong normalization). Let M G I 1 , % G I s and P G I p . 

(i) If there exist A, A such that % : A h A, then % G SN S ; 

(ii) If there exist A, A such that h M : A | A, then M G SN l ; 
(Hi) If there exist A such that h P \ A, then P G SN P . 



Proof. Let A = a :B, where a = a\,...,a n and B = B\,.. . ,B n . Let J? be the S -interpretation sending ev- 
ery atom to SN S and set 71, := a,[0] a,-[ar(fij) — 1]. a,[ar(B,)), for each i = 1,. . . ,n and K = %\,...,% n . 

An easy induction on the arity of formulas shows that % G By Theorem[T3l(i).(ii).(iii) respectively 

we get that 

(i) m{%la] G ||A|| > C SN S , (ii) M{n/a} G \A\j C SN l and (hi) P{%ja\ G SN P . 

Finally in each of the above cases we have £"{71/0:} -^^ E and since £"{71/0:} is strongly normalizing, 

then so is E. □ 
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4 Soundness and completeness of typed stack calculus w.r.t. classical se- 
mantics 

The present section provides soundness and completeness proofs of the stack calculus for the two- valued 
semantics of classical propositional logic. We find interesting to report the full completeness proof, 
which resembles very much a completeness proof for a tableaux calculus ED. In fact, as in a tableaux 
system there are labeled formulas (with true and false labels), in the stack calculus we have terms and 
stacks which play, respectively, the role of proofs and counter-proofs, exactly in the spirit of Krivine's 
Classical Realizability. 

It is easy matter to check that B = £ s ) is a realizability triple. For every formula A and B- 
interpretation we have 

jl} if||A|U=0 
I otherwise 

The induced function | • \j maps formulas into elements of the two-element boolean algebra {Z 1 ,©}, 
where the ordering is set-inclusion and the operators are U, n and complement. In other words Y} 
represents "true" and represents "false". The truth values behave as expected w.r.t. negation: \A\jr = 
0^hA|> = £ t . 

Definition 16. Let ^ be a set of formulas and let A be a formula. We say that <I> semantically entails A, 
notation <I> 1= A, if for every atomic ^-interpretation we have that Hseo — 

Theorem 17 (Soundness). 

(i) IfhM:A\p:B is provable (where FV(M) C ft), then ~^B U ..., -.fi„ N A. 

(ii) If % : A\-f3:B is provable (where FV(7r) C j8), then -iBi, . . . , 1= -A. 
(Hi) If\-P | fi:Bis provable (where FV(P) C ft), then ^B u ..., ->B n \= _L 

Proof, (i) Let /bea B -interpretation. By Theorem [T3l (Adequacy) if for all i G [l,n] ^ 0, then 

M{n/a} G \A\jr, i.e., \A\js / 0. Since \\Bi\\jr / <^ \Bi\js = <5 \-<Bi\s = I}, we conclude that every 
derivable judgement h M : A \ /3 :B has the following property: for every J^, if |-iBj|j*r = 1} for all 
i S [1,«], then \A\ji = 1}. This means, by definition, that ->B\, . . . ,-<B n \= A. 

(ii),(iii) Similar to (i), again applying Theorem [T3l □ 

The main goal of the rest of the section is to prove that every classical tautology is the type of some 
term of the stack-calculus. The proof is supported by some auxiliary definitions and lemmas. 

Definition 18. Let A be a formula. We define its terminal tmn(A) by induction setting tmn(G) = G 
and tmn(A — > B) = tmn(fi). We also define its premisses pr(A) by induction setting pr(G) = and 
pr(A — )> B) = {A}Upr(B). 

Definition 19. Let <I> be a set of formulas. We define three sets tmn (<!>) = {tmn (A) : A € <!>}, 
pr(<&) = [j Ae ^pr(A), and prt(4>) = {A G pr(<£) : tmn (A) G (tmn(<D)U{-L})}. 

Definition 20. A set <i> of formulas is saturated if for every formula A G prt(<I>) we have pr(A) n <!> ^ 0. 

It will turn out that, by applying an iterative process, it is possible to construct saturated sets of 
formulas starting from finite sets of formulas which cannot be proved by a sequent of the stack calculus. 
The forthcoming Lemmas ED and [22] are the fundamental ingredients for such construction. We write 
Y- — : A | — : B to express the fact that there are no variables j8 and no term M such that h M : A \ f5 : B. 
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Lemma 21. Let <£> = {Bq, ... ,B n } be a finite set of formulas and suppose Y — : Bq \ — ;B\ y .. . , — :B n . 
Then prt (3>) n At = 0. 

Proof. We prove the contrapositive statement. Supposing A G prt(<J>) n At, we distinguish two possible 
cases: (1) and (2). We write j8 :B for the context j3i :B\,... ,j8„ :B n . Let £ be a fresh variable. 

(1) There exist some j,k G [0,n] such that Bj = Cj ->• > C- -» >■ C^, -> G', 

fi Jk = Cj'-> ► C^„ -»• G", and C\ = G" = A. Then h ^ Q .(^e.pj[i - 1] *e[m"))*ft : Bo I j3:B. 

(2) There exist some j € [0,n] such that B y - = C[^t > C- ->■ ► C^, G', and C- = _L = A. Then 

h ptfo.ipLE.pjli - 1] * nil) *ft : B | J8 

□ 

Lemma 22. Let <£> = {Bq, . . . ,B n } be a finite set of formulas and suppose Y — : Bq \ — : B\, . . . , — : B n . 
Then for every A G prt(<I > ) there exists a formula C G pr(A) such thatY — : Bq \ —:Bi,.,., — :B n , — :C. 

Proof. We prove the contrapositive statement. To this end, suppose A G prt(<J>) is a formula that is 
a counterexample to the conclusion of the statement. First note that pr(A) ^ 0, otherwise A G At, in 
contradiction with Lemma [21] Therefore A = C\ C m G, with m > 1 . We write j3 : B for the 

context j3i :B\,. . . ,J3„:B„. 

By our assumption for every / = 1, . . . ,m (m > 1) there exist Mj, 7; such that h M,- : Bo I j3 :B, 7 '■ C{ 
and thus we derive h HYi.Mj-kpo : C, \ Pq:Bq,P :B for each i = l,...,m. Moreover, since A G prt (<!>), 
there are two cases: 

(1) there exist some k,h G [0,n] such that B/, = C[ — > > Cj -4 ► C' ?! , -)■ G', 

Si = -»• ► C^„ -»• G", A = C;., and G = G". 

(2) G = _L and there exist some h G [0, n] such that Bf l = C[—> ► -)• s> C^, ->■ G' and A = Cj. 

Let e be a fresh variable. In both cases (1) and (2) there exists a stack % such that % : G h £ is 
derivable, where 71 is either nil or e[ar(B^)). 

Let 7i,...,7 m ,5befresh variables and let CJ := (/iTi .Mi * j3o) {\Ly m .M m ~kfys).%. Then we finally 

derive h jUj8o.(ju5.(jue.5[j- l]*CJ)*j3 fe )*j3/ ! :B \p:B. □ 

The complexity of a formula A is the total number of implications and atomic sub-formulas occurring 
in A. The formulas of complexity one are exactly the atomic ones. 

Lemma 23. Let & be a saturated set of formulas. Then there exists a ^-interpretation J" such that 
\ A \y = far all A G <£. 

Proof. The case in which <I> = is trivial, so for the rest of the proof we assume <I> ^ 0. We define a 
B -interpretation J? as follows: 

'0 ifGGtmn(<D) 
E t otherwise 



J(G) 



We now prove that \A\jr = 0, for all AGO. The proof is by induction on the complexity of formulas. 
Suppose A G At. If A = _L the result is obvious; otherwise, since A G tmn (<I>), we have \A\j = 0. 
Suppose A = C\ — ?> C m — ?> G (with m > 1). We now prove that 

(1) |CiU = --- = |C m U = E t ; (2) |GU = 0. 



A. Carraro, T. Ehrhard, A. Salibra 



103 



The items (1) and (2) together yield \A\y = 0. 

(1) For C, E pr(A) we distinguish two cases. 

Suppose Cj prt(<J>). Then tmn(C ! ) is not a terminal of a formula in <!>. By definition of J? we have 
|tmn(C;)|jf = 1}. We conclude observing that \Ci\j 3 Itmr^C,-)!^ = 

Suppose Q G prt(<I>). Then, by saturation of <!>, Q = C[ — > > C' m , -)■ G' (with m' > 1) and there 

exists j € [l,m'] such that Cj € <I>. Since Cy has strictly lower complexity than A, by induction 
hypothesis \Cj\j = 0. This implies \Ci\js = I}. 

(2) Since G G tmn(<&) U {^}, evidently \G\y = by the definition of the interpretation | • \jr. 

□ 

Next we give the second main theorem of this section, concerning completeness. The idea of its 
proof is the counter-model construction, typical of Smullyan's analytic tableaux OTTl . 

Theorem 24 (Completeness). Let A be a formula and let B be a sequence of formulas. If—>Bi , —*B n 1= 
A, then there exist M and j8 such that h M : A \ j8 : B is provable. 

Proof. We proceed to prove the contrapositive statement. Suppose Y- — : A | — :B. Then we can construct 
a saturated set <I> of formulas containing {A,Bi, . . . ,B n } as <I> := \J n> o^ n , where the family {<J>„}„>o is 
inductively defined as follows: 

• <£<) := {A,B\,. . . ,B n }; 

• If prt (<t> n ) = 0, then we define <I>, J+ i :=<£„. If prt (<t> n ) = {Ci,...,Q} / 0, by Lemma 1221 for 
each Q there exists a formula D; G pr(C,) such that Y- — : A \ — ;B\, ... , — :B n , — :D[. Let ^ n = 
{D\, . . . ,Dk}, where each D, is the leftmost premiss of Q having the property that Y- — : A \ — : 
Bi,..., — :B m — :Di. Then we define <J>„ + i := <t> n U 

By construction <I> is a saturated set of formulas containing {A,B\, . . . ,B n }. Finally applying Lemma [23] 
we obtain some such that \B\\jr = ■ ■ ■ = \B n \jr = \A\jr = 0, meaning that ->B\,, . . , -iB n YA. □ 

Of course Theorem [24] implies that every classical prepositional tautology (of the {— >, _L}-fragment) 
is provable by the type derivation of a term. 

5 The Krivine machine for stack calculus 

In the present section we sketch the definition of a Krivine machine that executes the terms of stack 
calculus. Similar machines have been defined by de Groote J9], Laurent l20l . Reus and Streicher ll29l 
for the AjU -calculus. Using this machine we show how to encode control mechanisms like label/resume 
and raise/handle in the stack calculus. 

In order to define the states of the machine, we need the following mutually inductive definitions. 
A stack closure is a pair p = (7t,e) consisting of a stack % and an environment e; a term closure is a 
pair m = (M,e) consisting of a stack % and an environment e; an environment is a partial function (with 
finite domain) from the set of stack variables to the set of stack closures. We write e[a ^— i p] for the 
environment e' which assumes the same values as e except at most on a, where e'{a) = p. 

A state is a pair (m,p) and the machine consists of the following (deterministic) transitions between 
states: 

((N,e),p) — > {(n'[n],e'),p) if a[n] is the ^car.cdr -normal form of ./V and e{a) = (V,<?') 
((N,e),p) — > ((M,e'),(n,e')) if \ia.M-k% is the ^ C ar,cdr -normal form of N and e' = e[a <H p] 
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We let — » be the reflexive and transitive closure of the relation — K Consider a state ((M,e),p). The 
closure p is the current context of evaluation of M; the next state may discard p and restore a context 
appeared in the past. The environment e is the current state of the memory: it takes into account all side 
effects caused by the previous stages of computation. The term M is said to be in execution position and 
it is the current program acting on p evaluated in e. A computation is a sequence of states sequentially 
related by the transition rules. 

To explain how the stack calculus achieves the control of the execution flow, we define label/resume 
and raise/handle instructions and show that the machine soundly executes them. We set 

laMM}:=jUj3.(jueJlf*j3)*(/i5.5[0]*j3).j3 with/3 ^FV(M) 

res e {M} := juy.e[0] *N. y with e, y £ FV(M) 

throw e {M} := |iy.e[0]*M.nil with £,y^FV(M) 

try e {M}catch{AT}:=^j3.(/ie.M*j3)*(/i5.A^*5[0].j3).nil with (FV(M) UFV(AT)), 8 <j£FV(N) 

We now discuss briefly and informally how the machine executes the above instructions. 

Suppose to start the machine in a state S = ((lab e {M},eo))Po)- If no term res e {./V} ever reaches the 
execution position, then the computation starting at S is equivalent to that starting at 5' = ((M,eo),po). 
Otherwise S-^ n {{}iy.e[0\*N.y,e n ),p n )-^ 2 ((N,e n+i),Pn+2}> an d we notice that the computation 
starting at ((res e {N},e„),p n ) is equivalent to that starting at {(N,e n+ i),p n+ 2). 

Suppose to start the machine in a state S = ((try e {M}catch{./V},eo)j,Po)- If no term throw e {M'} 
ever reaches the execution position, then the computation starting at 5 is equivalent to that starting at 
S' = ((M,e ),p ). Otherwise S^>" ((juy.e[0] *Af'. n\\,e n ),p n ) — » 3 {(N,e n+2 ), (5[0].p,e n+2 )) and we 
can see that the exception handler N goes on with the computation, and the value M' returned by the 
exception is at use of N, since it is stored in the in the current environment e n+ 2 in a cell that is present 
in the current evaluation context. 

We conclude remarking that all the above constructions can be typed by derived rules. Informally 
one may assert that Theorem [IT] and Theorem [8] together, ensure that the execution of well-typed term 
always ensures that all the "resume" and "raise" instructions are always handled correctly. 



6 Denotational semantics of stack calculus 

Girard's correlation spaces |[T3l are (one of) the first denotational models of Classical Logic: they refine 
coherence spaces [12 ] with some additional structure. Intuitively, these richer objects come with the 
information required to interpret structural rules (weakening and contraction) on the right-hand side of 
sequents in classical sequent calculus. Girard's construction hints that Classical Logic may be encoded 
into Linear Logic, a result achieved by Danos et al. via a dual linear decomposition of classical 
implication. In |29|| the authors interpret the XpL -calculus in the Cartesian closed category of "negated 
domains", i.e. the full subcategory of CPO determined by the objects of the form R A , where A is a 
predomain and 7? is some fixed domains of "responses". The category of negated domains is a particular 
category of continuations |[T9l and categories of continuations are complete [15 ] for the A /I -calculus, in 
the sense that every equational theory for X -calculus is given by the kernel relation of the interpreta- 
tion in some category of continuations. Selinger [30] gives a general presentation in terms of control 
categories, which are easily seen to subsume categories of continuations. However via a categorical 
structure theorem he also shows that every control category is equivalent to a category of continuations. 
This structure theorem implies the soundness and completeness of the categorical interpretation of the 
A/i -calculus with respect to a natural CPS semantics. 
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In brief, a control category is a Cartesian closed category (C,&,T,=>) which is also a symmet- 
ric premonoidal category (C,^,_L). The binoidal functor *3 distributes over & and there is a natural 
isomorphism sa,b,c '■ B A) *gC — > (B*t?C) in A,B and C satisfying some coherence conditions. Selinger 
distinguishes a subcategory C" of C, called the focus of C, which have the same objects as C but fewer 
arrows. On C" the functor *g restricts to a coproduct. It is very important to remark that in any control 
category C there exists an isomorphism (p : C(T, B*8A) = C^(_L A ,B) natural in central B (see 11301 for 
the details). If C is a control category we map falsity to the object _L and set \A — >• B\ = _lJ j4 l ) S?|5|; a 
context A = a :A is mapped to |A| = \A\ \*8 ■ • • > S > |A W |. Then the judgements are interpreted as morphisms 
[% : A h A] : |A| -> |A|, [h Af : A | Aj : _L |A| -)■ |A| and [h P | A] : T ->• |A|, using the coproduct struc- 
ture and the isomorphism (p. The above intepretation is sound, in the sense that it is invariant under 
—^ s ^ -reduction of expressions. 

Very interesting is the work of Laurent and Regnier [23 1 which shows in detail how to extract a 
control category out of a categorical model of MALL. This contribution gives a general framework 
under which falls the correlation spaces model construction by Girard and at the same time constitutes 
the categorical counterpart of Danos-Joinet-Schellinx's Q call-by-name encoding of Classical logic 
into Linear Logic. 

A *-autonomous category is a symmetric monoidal category with two monoidal structures (C,(g>,l) 
and (C, >S>, ±) possessing a dualizing endofunctor which maps / : A — > B to f L : B L — » A L . 

Let C be a *-autonomous category. When the forgetful functor from the category Mon>g>(C) (of *9- 
monoids and 'g-monoid morphisms) to the category C has a right adjoint, then C is a Lafont category. 
We recall that the co-Kleisli category Kq of a monoidal category C via a comonad (!,5,e) has the 
same objects as C and Kc(A,B) = C(\A,B); the composition of morphisms is defined using the monad 
structure (see [26]). One of the main results of 11231 is that if C is a *-autonomous Lafont category with 
finite products, then then the co-Kleisli category Kq> of the full-subcategory C of C whose objects are 
the 'S'-monoids is a control category. 

6.1 A simple interpretation of stack calculus 

Inspired by Laurent and Regnier's work [23] we give a minimal framework in which the stack calculus 
can be soundly interpreted. The absence of the A -abstraction, allows us to focus on the minimal structure 
required to interpret Laurent's Polarized Linear Logic 11211 and to use it to interpret the stack calculus. 

Let C be a *-autonomous category. We denote by p A : A — >■ Al?L, Xa '■ A — > _L^A, a, y and T the 
usual natural isomorphisms related to the monoidal structure of (C, *g, _L). 

A linear category is a symmetric monoidal category together with a symmetric monoidal comonad 
((!,m),5,e) such that there are monoidal natural transformations with components : !A — > 1 and 
(1a : !A — >-A(g>A which are coalgebra moiphisms and make each free !-coalgebra a commutative <g)- 
comonoid (LA,^,^); moreover 8a '■ !A — >VA is acomonoid morphism, for every object A. 

In the sequel we let C be a *-autonomous linear category, so that by duality we can turn the above 
definition in terms of a monad ((?, m), 8, e), ?-algebras and 'S'-monoids. In this case there are monoidal 
natural transformations with components wa '■ -L — >?A and ca :?A ? S ) ?A — s>?A which are ?-algebra mor- 
phisms and make each free ?-algebra a commutative 'g-monoid (?A,ca,Wa); 8a :??A — >1A is a monoid 
morphism, for every object A. Under these hypotheses all ?-algebras A, being retract of a the free al- 
gebra ?A, have a multiplication ca, and a unit wa (see ll26l for further details). The category C' of 
Eilenberg-Moore algebras is symmetric monoidal, with (co)tensor product of (A,alg A ), (B,a\g B ) given 
by (A*gB, (alg^alg^) o m 2 ) and unit given by (_L, m 1 ). The *-autonomous structure of C yields a natu- 
ral isomorphism A : C(1,B > S > A) — > C(A^,B) that we will use to interpret abstraction (a natural retraction 
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C(1,B>9A) oC(A- L ,S) would suffice anyway). 

Starting from a valuation that associates ?-algebras to atomic types and the object _L to falsity, the 
arrow-types are mapped as follows: |A — > B\ =?|A| ±? S ) |B|. Given a context A = a : A we set |A| = 
\A\ \*g • ■ -^A^. Note that all types are interpreted by ?-algebras. Then the type judgements with assump- 
tions A can be easily interpreted as morphisms with target |A|; for example [nil : _L h A] : _L — >• |A| is 
the unit of the monoid |A|. We describe such interpretation for the particular case of the untyped stack 
calculus, for which we need a ?-algebra U of C together with two ?-algebra morphisms La :lU Ly 2U — > U 
and Ap : U -^W L *gU satisfying ApoLa = id ?f/ ± w and a ?-algebra morphism # : U — > _L (needed for 
the stack nil). We write U" for the «-fold ^-product of U. Such product inherits a ?-algebra structure 
algj;,, defined using the algebra alg^ and the monoidality of the monad; as a consequence it also inherits 

a multiplication cu* and a unit wu*. We also define t/ : U ^ L 1 ' 1 ^U>9± n ~ j w " J - l ' 9uiu ' Sw '>- J ) 

For all expressions E with W(E) C a we define the interpretation [Mjg : U 1 - — > £/ n , [7f]g :U —^U" 
and [P] a ; 1 -> t/ n as follows (n = flee): 

Ma = 1/ [M.rcJa = [al g{/ „o?[M] a ,[7rl a ]oAp [cdr(«)] a = Ma oLao {w u ^\d u ) o Pu 

[nil] a = w f/ «ot? [car(^)] a = M a oLao(e t/ ^w I/ )oV W-P\z=MM*fi) 

[M*7r] a = [id f/ „,M a ]oA- 1 (M a ) 

Note that the denotations of stacks are ?-algebra morphisms and it is not difficult to verify that 
the above interpretation is invariant under — > s -reduction. To see that check before that P?{^/j3}] a = 
[id a , Ma] o |E] a a. The category Relof sets and relations is a *-autonomous linear category that satisfies 
all our requirements ESI . If S is a set, we denote by ^(S)^ the set of all the N-indexed sequences 
a = (ai ,02, ■ ■ ■ ) of multisets over S such that a* = [] holds for all but a finite number of indices i G N. The 
set ^{(Sy w > is a simple example of ?-algebra of Rel. For a = (a\,a2, ■■ ■) and x = (&i,&2> • • • )> we define 
a + T= (aifctlfci,a2l±l&2,-- - ) and * = ([],[],...). Then the relations w = {(1,*)} andc = {((o,x),o+x) : 
a,T € ^# f (5') (fi5) } make (J#f{S)( a \c,w) a 'S'-monoid in Rel. The operation + on ^ f (5') (co) can also 
be extended componentwise to (^f(S)( m ') k (whose elements are ranged over by a,x, ...) transferring 
thereby the monoid structure. In order to model the untyped calculus we need a 'S'-monoid U of together 
with two relations La C (.^(U) x U) x U and Ap C U x (^(£7) x U) satisfying ApoLa = id jg t {ijwu 
and a relation # C U x {1}. In the category Rel lives one such object *3> = (D, Ap,La) that has already 
been encountered many times in the literature (see for example [2]) as a model of the ordinary A -calculus 
(as well as of some of its extensions). The object is constructed as union D = \J ne ^D n of a family of 
sets (-D„)neN defined by D = and D n+ \ = ^f(p n )( a >. Given a = (a\, 0,2,0,3,. ■■) &D and a G ^#f(D), 
we write av.G for the element (0,01,02,03,. . .) G D. Since D = ^f(Dp m \ as previously observed it 
has a standard monoid structure and we can set La = {((a, a), a:: a) : a G ^#f(D), a G D} and Ap = 
{(a::(7, (a, <?)) :a6^(Z)), a € D} satisfying the desired equation; as a matter of fact also the equation 
LaoAp = id[/ holds and the interpretation of expressions is invariant under — > s?7 -reduction. Finally 

* = {(*,!)}■ 

The isomorphism A : C(1,WV) -> C{U^,U) is trivially given by A(f) = {(a, j3) : (1, (J3,a)) G /}. 
The interpretation is concretely defined as follows: 

M a = {(a, (*,.., a,..,*)) : a GD}; [cdr(rc)] a = {(a,x) : (Q ::&,?) G W a }; 

[car(7r)] a = {(a,f) : ([a] ::*,?) G Ms}; [^Ma = {(a,?) : (l,(?,a)) G [P]^}; 

[M.rcja ={([(Ti,..,(T Jt ]::(T,EtoTi) :*>0,Vi = 1,..,*. (a,-,f,-) G [M] a , (c7,f ) G Ma}; 
[M*7rJa = {(!,? + ?') : 3a GD. (a,f) G [M] a , (a,f) G W a }; [nil] a = {(*,(*,..,*))}. 
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For example for the stack calculus version of call /cc we have 
\fia.a[0] * (MjS.jS [0] *«[!)). a[l)] = {[[[cti] ::*,.., [a*] ::*] :: a„] :: (E^ff/) : * > 0, a , .., a* e £>}. 



7 Conclusions 

We introduced the stack calculus, a finitary functional calculus with simple syntax and rewrite rules 
in which the calculi introduced so far in the Curry-Howard correspondence for classical logic can be 
faithfully encoded; instead of exhibiting comparisons with all the existing formalisms, we just showed 
how Parigot's X\l -calculus can be translated into our calculus. We proved that the untyped stack cal- 
culus enjoys confluence, and that types enforce strong normalization. The typed fragment is a sound 
and complete system for full implicational Classical Logic. The type system that Lafont et al. |[T9l use 
for the A -calculus with pairs may be used to type stack expressions within the {A, _L} -fragment of 
Intuitionistic Logic: under this point of view, the stack calculus is the target-language of a CPS trans- 
lation from itself that alters the types but not the expressions of the calculus. In the classically-typed 
system ({—>•, _L} -fragment of Classical Logic) the arrow type corresponds to the stack constructor; for 
this reason the realizability interpretation of types a la Krivine matches perfectly the logical meaning of 
the arrow in the type system. The proofs of soundness and strong normalization of the calculus are both 
given by particular realizability interpretations. We defined a Krivine machine that executes the terms 
of stack calculus. We showed how to encode control mechanisms like label/resume and raise/handle in 
the stack calculus which are soundly executed by our machine. This approach seems to be simpler than 
the extension of ML with exceptions studied in De Groote [8 ]. Inspired by Laurent and Regnier's work 
ll23l . we give a simple categorical framework to interpret the expressions of both typed and untyped stack 
calculus. We show how, in the case of a relational semantics, this famework allows a simple calculation 
of the interpretation of expressions. 
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